Privacy Policy

This Privacy Policy explains what personal data the Tweakerr website (the "Website") collects, why it is collected, and what rights you have. It is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and the rules made thereunder.

For the purposes of the DPDP Act, Tweakerr is the Data Fiduciary in respect of personal data processed through this Website, and you are the Data Principal.

1. The short version

You do not need an account to read Tweakerr, and we do not ask you for one. We do not sell your personal data. The only personal data most readers ever give us is an email address, and only if they choose to write to us.

2. What we collect

Information you give us voluntarily. If you email us — a tip, a correction, a copyright complaint or a grievance — we receive your email address and whatever you put in your message. We use it to deal with what you wrote to us about, and for nothing else.

Technical information collected automatically. Like effectively every website, our hosting provider records standard server logs when a page is requested. These may include your IP address, the date and time of the request, the page requested, the referring page, and your browser and device type. These logs exist to keep the Website running and secure — diagnosing errors, detecting abuse and automated scraping — and are not used to build a profile of you.

Cookies. The Website does not set advertising or tracking cookies on readers. A session cookie is set only for editorial staff who log in to the administrative interface, and it is strictly necessary for that login to work.

3. Third-party services

To render pages, the Website loads certain resources from third-party providers. When your browser requests those resources, the provider receives your IP address and standard request information under its own privacy policy, which we do not control:

• Google Fonts — web fonts
• Content delivery networks (cdn.tailwindcss.com, jsDelivr) — stylesheets and scripts

Photographs used on stories are downloaded and served from our own servers rather than hot-linked, so viewing an image does not send a request to a third party.

4. Why we process your data, and on what basis

We process personal data for the following purposes, on the basis of your consent where you have voluntarily given us data, and on the basis of legitimate uses permitted under the DPDP Act where processing is necessary to operate and secure the Website:

• to respond to your email, tip, correction, complaint or grievance;
• to operate, maintain and secure the Website, and to diagnose technical problems;
• to prevent, detect and investigate abuse, fraud and unauthorised access;
• to comply with applicable law and respond to lawful requests from public authorities.

5. What we do not do

• We do not sell, rent or trade personal data.
• We do not run advertising networks or behavioural advertising on the Website.
• We do not ask readers for game account credentials, one-time passwords or payment details, and you should treat anyone who does so in our name as fraudulent.

6. Sharing

We share personal data only with our hosting and infrastructure providers to the extent necessary to run the Website, and where we are required to do so by law, by a court of competent jurisdiction, or by a lawfully empowered authority.

7. Retention

We keep correspondence for as long as is necessary to deal with the matter you raised and to keep a record of how it was dealt with, and thereafter only for as long as required by applicable law. Server logs are retained for a limited period for security and diagnostic purposes and are then deleted or overwritten.

8. Security

We take reasonable security safeguards to prevent personal data breaches, including access controls on our administrative interface and encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.

9. Your rights under the DPDP Act, 2023

As a Data Principal, you have the right to:

• access a summary of the personal data we process about you and how we process it;
• correction and erasure of your personal data that is inaccurate, incomplete, or no longer necessary for the purpose it was collected;
• grievance redressal through the Grievance Officer named below, before approaching the Data Protection Board of India;
• nominate another individual to exercise these rights on your behalf in the event of your death or incapacity;
• withdraw consent at any time, where processing is based on your consent. Withdrawal does not affect the lawfulness of processing carried out before it.

To exercise any of these rights, write to [add a grievance email].

Please note that the DPDP Act also places duties on you as a Data Principal, including not to impersonate another person, not to suppress material information, and not to file a false or frivolous grievance.

10. Children

Under the DPDP Act, a child is an individual below eighteen (18) years of age.

We know that some of our readers are under eighteen. We therefore do not knowingly collect personal data from a child, we do not undertake tracking or behavioural monitoring of children, and we do not direct advertising at children. We do not process a child's personal data in any manner likely to cause a detrimental effect on their well-being.

Where a child wishes to contact us, this should be done with the consent of a parent or legal guardian. If you are a parent or guardian and believe a child has provided us with personal data, write to [add a grievance email] and we will delete it.

11. Links to other websites

The Website links to third-party websites, including the publishers whose reporting we credit. This Privacy Policy does not apply to them. Please read the privacy policy of any website you visit through a link on this Website.

12. Changes to this Policy

We may update this Privacy Policy from time to time, including if we introduce analytics, advertising or any other feature that changes what is collected. The date at the top of this page shows when it was last changed, and material changes will be notified on the Website.

13. Grievance Officer

In accordance with the DPDP Act, 2023, the Information Technology Act, 2000 and the rules made thereunder:

• Name: [add the grievance officer’s name]
• Email: [add a grievance email]
• Address: [add a postal address]

A grievance is acknowledged within twenty-four (24) hours of receipt and disposed of within fifteen (15) days of receipt.

14. Contact

General questions about this Policy: [add a contact email].